Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: vHWFBojCcsn+9oh5fR9hJezUEa4I4z6H5Sm9cgR6fh0=
Subject key identifier: 58:09:11:85:F7:CD:6B:8A:57:CA:B3:AF:42:D0:06:EA:EB:95:77:C8
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019DA378C4B7E50C5DD360B208EFE2B27E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 1668
Signing time: Sun 19 Apr 2026 02:01:34 +0000
Manifest this update: Sun 19 Apr 2026 02:01:34 +0000
Manifest next update: Mon 20 Apr 2026 02:01:34 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: pfYjdgIpt0scY9qdpIOYppx9PFxZAa/cp/LtSLu1auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:c4:b7:e5:0c:5d:d3:60:b2:08:ef:e2:b2:7e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Apr 19 02:01:34 2026 GMT
Not After : Apr 20 02:01:34 2026 GMT
Subject: CN=58091185f7cd6b8a57cab3af42d006eaeb9577c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:06:2e:8a:82:50:1d:5a:f2:5b:a9:a2:6f:
3b:dd:e1:9e:5a:78:09:24:5f:b1:1b:29:3b:2c:51:
b4:34:fe:d7:90:64:5e:ed:9a:ad:9c:c3:4f:56:7f:
4e:d0:d2:76:2c:8f:1b:06:7a:e2:77:3b:97:aa:c5:
83:72:81:2a:d6:4d:c9:09:03:a0:6e:7c:82:8c:92:
68:60:d0:aa:21:15:d4:69:c4:9e:c9:c6:76:42:e3:
b0:fe:96:27:cf:d7:d6:93:2e:b4:5b:ed:9a:7a:6e:
8d:bd:c5:b4:d4:7c:56:d5:0e:34:b0:d7:fc:f9:b4:
27:32:a2:f9:30:b4:c3:3c:81:1e:13:41:b5:19:9a:
d3:ea:b6:d5:2d:4d:f8:e6:85:4b:56:e1:dc:6b:77:
cc:f0:9f:e3:8f:3e:55:90:7f:89:a4:f8:22:48:51:
eb:74:89:cb:15:0c:5b:48:7c:77:52:4b:8f:9e:7b:
64:5b:66:f0:35:f1:27:07:c1:b6:2a:33:8e:53:5b:
6b:f7:1c:95:2e:9e:d9:82:bf:05:0c:0e:2e:8b:33:
1a:8a:45:fd:68:2a:59:f2:40:9e:f3:b9:33:00:3c:
2b:88:29:98:a2:9f:06:0f:d7:40:2b:ba:6d:fb:b3:
eb:75:d6:e0:ea:07:0e:98:56:cd:50:63:ca:c4:07:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:09:11:85:F7:CD:6B:8A:57:CA:B3:AF:42:D0:06:EA:EB:95:77:C8
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1c:16:7c:82:23:7e:57:9a:29:8d:4b:19:06:2e:9d:9b:b1:
3e:d6:da:23:e4:ea:3b:6c:2e:d9:88:fc:2d:e5:9b:ee:b2:bb:
1a:aa:95:ec:f2:d5:24:0f:19:04:e5:bb:09:02:fb:67:0e:1f:
28:87:f0:9a:25:7b:0c:5b:aa:9c:15:3e:d8:f8:c9:1c:17:8f:
bd:80:e9:43:c2:1d:a7:4f:a4:61:e0:1c:d2:76:9c:50:94:d8:
d6:7e:c7:2c:37:a5:80:cc:df:cc:81:ee:99:4a:55:f0:e8:2f:
f3:55:89:ef:fa:70:d1:bd:72:89:b5:ca:75:ec:e6:7d:1d:18:
f3:83:25:08:e7:fd:66:d1:16:89:37:1e:fb:ff:a1:9e:f6:bd:
7e:13:f5:22:5b:0f:45:51:21:74:39:c3:38:36:ac:98:0e:e9:
dd:ae:36:c8:64:89:ec:ab:eb:2d:da:e4:81:8a:18:6d:d9:06:
a6:d8:f1:c9:a4:c6:17:d3:17:4e:3f:88:55:cf:4e:65:5e:bf:
d0:17:4b:4d:3c:a5:9c:4b:14:1f:08:b8:be:c3:cb:0c:af:e0:
a3:d8:63:9c:ed:ca:a9:e7:c1:5f:76:a5:7f:7d:9e:d1:4c:ef:
4e:a1:45:52:7d:ce:d4:ed:ba:a9:5e:c5:c3:69:60:86:57:13:
89:fa:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:19 2026 by rpki-client